This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json) Hash identifier: 7+9tS2uoOpsaVaKKXJ0ocnUTG9YRTz6BmB0yQ7F7juU= Subject key identifier: 82:32:9F:9F:C6:85:A1:FD:C7:1F:D8:C9:08:3C:B4:11:92:77:5F:7A Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18 Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18 Certificate serial: 019AF3F71F9901FE77BE59FBF02FF9DB26C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft Manifest number: 0D9B Signing time: Sat 06 Dec 2025 14:00:50 +0000 Manifest this update: Sat 06 Dec 2025 14:00:50 +0000 Manifest next update: Sun 07 Dec 2025 14:00:50 +0000 Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=) 2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: TcTtGEGFTYA09ZoycsUYMarl2ENPqQWI5W4znE2aszo=) 3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:1f:99:01:fe:77:be:59:fb:f0:2f:f9:db:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18 Validity Not Before: Dec 6 14:00:50 2025 GMT Not After : Dec 7 14:00:50 2025 GMT Subject: CN=82329f9fc685a1fdc71fd8c9083cb41192775f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:fe:f8:c1:50:fd:27:f3:a4:29:72:19:a7: fc:e4:53:ee:07:bf:0d:2e:5d:82:13:40:63:61:de: 93:c0:ab:dc:b4:24:4d:43:a9:3c:e5:44:fb:23:77: b9:9a:9d:07:e7:17:0b:7d:03:44:7c:6b:0f:2e:68: 21:ea:66:66:eb:5a:2d:82:cd:75:24:be:ed:f5:78: 24:cf:e6:8b:ce:e3:0f:f3:7c:b1:be:07:22:c5:a8: 51:12:54:99:20:f2:77:37:23:bf:29:bf:a8:58:05: 94:e4:f0:e1:e4:1d:1a:e5:19:9d:6b:0b:63:ab:fb: 15:2e:39:be:fe:12:84:6c:55:b1:f9:26:2c:73:73: 6d:d1:ae:25:70:8d:b9:67:2b:63:3e:86:d2:b4:67: 53:6c:27:32:ee:b2:a0:c1:9a:be:83:6a:c7:2f:7e: 33:ce:bd:9b:32:a1:e4:5d:65:79:b9:8a:e3:ce:d2: d0:f4:33:86:6a:37:96:a7:71:51:0b:e7:fa:02:4f: 12:ba:9f:56:f1:06:d3:03:40:33:24:d2:52:e2:22: 86:19:38:d2:1c:db:08:7f:ed:de:f5:f8:01:fa:ac: ec:13:c0:b3:d2:1d:52:db:ca:4b:a8:53:b1:89:c4: 0a:a5:41:78:44:db:dd:af:71:10:47:c7:5a:24:a5: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:9F:9F:C6:85:A1:FD:C7:1F:D8:C9:08:3C:B4:11:92:77:5F:7A X509v3 Authority Key Identifier: keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1e:f3:1b:74:af:00:1a:21:4f:7b:30:db:07:e0:76:e4:e6: d2:42:b1:bb:90:a5:d7:53:7f:84:c5:1e:7c:43:cc:96:6d:5b: 48:4f:b4:13:c7:5b:f5:57:65:c2:dd:4a:42:08:97:45:0f:07: 60:42:13:65:48:73:f0:5c:93:71:d6:2c:19:f8:54:31:dc:c3: ef:e1:aa:41:a8:75:30:41:4e:cb:8e:6e:fb:fe:13:91:a9:74: 0c:a2:5e:4a:10:af:46:a6:7c:54:e7:6d:02:29:3b:fe:9a:11: bb:f1:b8:cb:ff:ff:09:19:c4:e6:8b:09:bc:28:ef:90:45:bf: c9:c1:53:e5:db:71:68:68:8e:87:60:fc:a5:91:54:8d:f9:e4: 5c:01:fa:cb:58:e0:0e:1f:50:4b:f5:8a:4a:3d:3b:a9:b0:54: 53:e2:3a:66:ef:bb:3d:08:cd:56:33:b9:c9:82:34:cd:c7:33: cb:a3:60:9d:fe:5a:de:90:d1:49:52:a8:af:cf:7f:71:a5:70: 31:b6:15:90:69:4c:a6:24:5b:4f:23:e9:ec:fb:52:25:06:a9: 47:e6:96:ac:25:76:1a:14:34:31:d9:87:2c:04:82:40:a7:be: a7:4d:8b:d2:d0:ff:5b:0e:08:ca:58:5c:7f:71:ec:84:f9:35: 8a:40:ac:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9x+ZAf53vln78C/52ybAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOWE0NjcwMTQ2YWQ4ODBmMTRiYWRhNGIyNzYyYjYxM2Rk ZjFkMTgwHhcNMjUxMjA2MTQwMDUwWhcNMjUxMjA3MTQwMDUwWjAzMTEwLwYDVQQD Eyg4MjMyOWY5ZmM2ODVhMWZkYzcxZmQ4YzkwODNjYjQxMTkyNzc1ZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2f++MFQ/SfzpClyGaf85FPuB78N Ll2CE0BjYd6TwKvctCRNQ6k85UT7I3e5mp0H5xcLfQNEfGsPLmgh6mZm61otgs11 JL7t9Xgkz+aLzuMP83yxvgcixahRElSZIPJ3NyO/Kb+oWAWU5PDh5B0a5Rmdawtj q/sVLjm+/hKEbFWx+SYsc3Nt0a4lcI25ZytjPobStGdTbCcy7rKgwZq+g2rHL34z zr2bMqHkXWV5uYrjztLQ9DOGajeWp3FRC+f6Ak8Sup9W8QbTA0AzJNJS4iKGGTjS HNsIf+3e9fgB+qzsE8Cz0h1S28pLqFOxicQKpUF4RNvdr3EQR8daJKW6yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIyn5/GhaH9xx/YyQg8tBGSd196MB8GA1UdIwQY MBaAFI+aRnAUatiA8UutpLJ2K2E93x0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zNTQ0MzAtNTRiYy00NTVlLWIwZDEt N2NkNTA4ZjczMzY0LzEvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8zNTQ0MzAtNTRiYy00NTVlLWIwZDEtN2NkNTA4ZjczMzY0 LzEvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHh7zG3Sv ABohT3sw2wfgduTm0kKxu5Cl11N/hMUefEPMlm1bSE+0E8db9Vdlwt1KQgiXRQ8H YEITZUhz8FyTcdYsGfhUMdzD7+GqQah1MEFOy45u+/4Tkal0DKJeShCvRqZ8VOdt Aik7/poRu/G4y///CRnE5osJvCjvkEW/ycFT5dtxaGiOh2D8pZFUjfnkXAH6y1jg Dh9QS/WKSj07qbBUU+I6Zu+7PQjNVjO5yYI0zcczy6Ngnf5a3pDRSVKor89/caVw MbYVkGlMpiRbTyPp7PtSJQapR+aWrCV2GhQ0MdmHLASCQKe+p02L0tD/Ww4Iylhc f3HshPk1ikCsmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:54 2025 by rpki-client